Description
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename has a complete XSS payload followed by the .png extension.
Unscored
CVE-2020-25104
EUVD-2020-17795GHSA-2pqm-v28p-x679
eramba c2.8.1 and Enterprise before e2.19.3 allows XSS via a crafted filename for a file attached to an object. For example, the filename h…
Published Sep 3, 2020 · Updated Aug 4, 2024 · Assigned by mitre